Skip to content

Pull requests: owasp-modsecurity/ModSecurity

New pull request New
83 Open 966 Closed
83 Open 966 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

fix(iis): strip IPv6 zone/scope id from client IP string 2.x Related to ModSecurity version 2.x Platform - IIS
#3631 opened Sep 17, 2026 by A13501350 Loading…
3
v2: Return HTTP 400 for JSON completion errors without relaxing rejection 2.x Related to ModSecurity version 2.x
#3629 opened Sep 17, 2026 by vortexopenclaw Loading…
5
CPTAddElement memory leak fix 3.x Related to ModSecurity version 3.x
#3628 opened Sep 16, 2026 by chenuduss Contributor Loading…
10
Allow SecRuleScript without actions and stop parser state bleed into next rule 3.x Related to ModSecurity version 3.x
#3627 opened Sep 14, 2026 by Copilot AI Loading…
1
@fzipi
5
add return value to acmp_build_binary_tree and check it result 3.x Related to ModSecurity version 3.x
#3626 opened Sep 14, 2026 by chenuduss Contributor Loading…
32
IIS: fix ReadFileChunk latent overflow (allocate m_dwPageSize, not 1) 2.x Related to ModSecurity version 2.x Platform - IIS
#3624 opened Aug 27, 2026 by A13501350 Loading…
4
IIS: fix dead Host header fallback (r->hostname == NULL can never be true) 2.x Related to ModSecurity version 2.x Platform - IIS
#3622 opened Aug 27, 2026 by A13501350 Loading…
2
IIS: fix Content-Length formatting (correct printf specifier + full buffer size) 2.x Related to ModSecurity version 2.x Platform - IIS
#3620 opened Aug 27, 2026 by A13501350 Loading…
6
iis: drop chunked Transfer-Encoding when Content-Length is set 2.x Related to ModSecurity version 2.x Platform - IIS
#3618 opened Aug 22, 2026 by A13501350 Loading…
2
iis: fail closed (HTTP 500) on ModSecurity config load failure 2.x Related to ModSecurity version 2.x Platform - IIS
#3617 opened Aug 22, 2026 by A13501350 Loading…
2
Fix case-insensitive request header target exclusions 3.x Related to ModSecurity version 3.x
#3616 opened Aug 18, 2026 by TejasButani001 Loading…
8
Perf/rule remove lookup 3.x Related to ModSecurity version 3.x
#3615 opened Aug 17, 2026 by ziebarthw Loading…
6
fix: record real response status for IIS audit log F part 2.x Related to ModSecurity version 2.x Platform - IIS
#3613 opened Aug 14, 2026 by A13501350 Loading…
12
ci: statically link MinGW runtime into x86 fuzzy.dll and add 32-bit pool test 2.x Related to ModSecurity version 2.x windows
#3611 opened Aug 13, 2026 by A13501350 Loading…
2
test/fuzzer: fix AFL harness input handling and restore it to a compiling state 3.x Related to ModSecurity version 3.x
#3607 opened Aug 1, 2026 by shotintoeternity Loading…
6
Allow connectors to avoid unused intervention log payload overhead 3.x Related to ModSecurity version 3.x
#3606 opened Aug 1, 2026 by upgle Loading…
2
fix(windows): pin Conan's CMake generator to match the project's 3.x Related to ModSecurity version 3.x
#3605 opened Jul 28, 2026 by fzipi Collaborator Loading…
2 of 3 tasks
1
3
fix(iis): correct InstallModule32/64 CustomAction ID naming swap 2.x Related to ModSecurity version 2.x
#3603 opened Jul 26, 2026 by fzipi Collaborator Loading…
1
Fix checked parsing for argument and JSON depth limits 3.x Related to ModSecurity version 3.x
#3602 opened Jul 23, 2026 by AnnoyingTechnology Loading…
1
feat: add opt-in build flag to match v2's @rx anchor semantics (#3295) 3.x Related to ModSecurity version 3.x
#3600 opened Jul 19, 2026 by fzipi Collaborator Loading…
3 tasks done
14
fix(collections): Honour SecDataDir for LMDB, fix literal setvar writ… 3.x Related to ModSecurity version 3.x
#3597 opened Jul 10, 2026 by 20vikash Loading…
3
clean cppcheck warnings in the iis/ ext/ and mlogc/ directories 2.x Related to ModSecurity version 2.x
#3596 opened Jul 9, 2026 by umprayz Loading…
15
feat: make the pytest testing framework functional, migrate all v2 tests 2.x Related to ModSecurity version 2.x
#3594 opened Jul 1, 2026 by fzipi Collaborator Loading…
8 tasks done
24
Add SecUploadFileMode validation to rules_set_properties and regressi… 3.x Related to ModSecurity version 3.x
#3583 opened Jun 22, 2026 by Diamagnetic Loading…
1
7
create fopen_modsec 3.x Related to ModSecurity version 3.x
#3582 opened Jun 22, 2026 by kanseiishikawa Loading…
13
ProTip! Find all pull requests that aren't related to any open issues with -linked:issue.